Gambiva Privacy Policy

Personal Information Collected

The following categories of personal data may be collected during registration and ongoing use of the platform:

• Full name and date of birth;
• Contact details, including email address and phone number;
• Residential address and proof of identity documents;
• Financial information required for deposits and withdrawals;
• Technical data such as IP address, browser type, and device identifiers.

Purpose of Collection

Personal data is collected for the following purposes:

• Verifying user identity and age in compliance with UK licensing requirements;
• Processing financial transactions securely;
• Maintaining accurate account records;
• Fulfilling legal and regulatory obligations;
• Improving platform performance and user experience.

Security Measures

Gambiva applies both technical and organisational safeguards to protect user data:

• Encryption of data in transit and at rest using industry-standard protocols;
• Restricted access controls limiting data visibility to authorised personnel only;
• Regular security audits and vulnerability assessments;
• Staff training on data handling and confidentiality obligations.

User Rights Under UK Law

In accordance with UK GDPR and the Data Protection Act 2018, users hold the following rights:

• The right to access personal data held by the platform;
• The right to request correction of inaccurate or incomplete data;
• The right to request deletion of personal data, subject to legal retention requirements;
• The right to restrict or object to certain forms of processing;
• The right to data portability where technically feasible.

Personal data collected through the Gambiva platform is used strictly for defined, lawful purposes. All processing activities are conducted transparently and in compliance with UK data protection law.

Account and Service Management

Data is used to:

• Create and maintain user accounts;
• Verify identity and confirm eligibility to use the platform;
• Process deposits, withdrawals, and other financial transactions;
• Respond to customer support enquiries and resolve disputes.

Regulatory Compliance

Certain processing activities are required to fulfil legal obligations, including:

• Anti-money laundering (AML) checks and reporting;
• Responsible gambling monitoring and intervention;
• Record-keeping in accordance with UK Gambling Commission requirements.

Analytics and Platform Optimisation

Aggregated and anonymised data may be used to:

• Analyse usage patterns and platform performance;
• Identify and address technical issues;
• Improve the range and quality of services offered.

Marketing Communications

Personal data may be used to send promotional communications, subject to the following conditions:

• The user has provided explicit consent to receive such communications;
• Every marketing message includes a clear option to opt out;
• Consent can be withdrawn at any time through account settings or by contacting the support team.

All data processing activities are carried out on a lawful basis as defined under UK GDPR, including consent, contractual necessity, or legitimate interest.

Accessing and Updating Personal Data

To access or amend personal data, users may:

• Log in to their account and navigate to the account settings section to update standard profile information;
• Submit a formal data subject access request (DSAR) via the platform’s support channels for a full overview of stored data;
• Contact the customer support team directly to request corrections to inaccurate or outdated information.

Requests are processed within the timeframes prescribed by UK GDPR, typically within one calendar month of receipt.

Data Correction and Removal

Users may request the modification or deletion of specific personal data records. Requests for deletion are assessed against applicable legal retention obligations. Where data must be retained for regulatory purposes, users will be informed of the reason and expected retention period.

Security Verification and Consent

Before processing sensitive requests, identity verification may be required to protect user accounts. By submitting an access or amendment request, users consent to the security checks necessary to authenticate their identity.

Payment Data Processing

Payment information is processed through authorised third-party electronic service providers. These providers operate under strict contractual data protection obligations and are not permitted to use payment data for any purpose beyond transaction processing. Personal financial data is encrypted throughout transmission and storage.

Age Restrictions and Registration

• All users must confirm they are aged 18 or over during the registration process;
• The platform reserves the right to request supporting documentation to verify a user’s age at any point;
• Accounts will be suspended pending verification if there is any reasonable cause to doubt a user’s eligibility.

Limitations of Age Verification

Without the provision of valid supporting documentation, the operator cannot independently confirm the age of any individual attempting to register. Users are required to provide accurate information during sign-up, and any misrepresentation of age constitutes a breach of the platform’s Terms and Conditions.

Requests from Parents or Guardians

If a parent or legal guardian believes that a minor has registered on the platform and provided personal data, they may contact the customer support team to request:

• Immediate closure of the account;
• Permanent deletion of all personal data associated with that account.

Such requests will be investigated promptly and handled in accordance with UK data protection law and the platform’s child protection obligations.

Basis for Transfer

By creating an account and using the Gambiva platform, users acknowledge and consent to the transfer of their personal data to other countries for the purposes outlined in this Privacy Policy.

Safeguards Applied to Transfers

In the course of providing its services, Gambiva may transfer personal data to, and process it in, countries outside the United Kingdom. Such transfers may occur where the platform operates with partners, affiliates, or service providers located in other jurisdictions.

All international data transfers are conducted in compliance with UK GDPR requirements. The following safeguards are applied:

• Transfers are made only to countries that provide an adequate level of data protection, or where appropriate contractual safeguards are in place;
• All agents, partners, and affiliates involved in processing transferred data are bound by strict confidentiality obligations;
• Data sharing agreements set out the permitted uses of personal information and prohibit unauthorised disclosure or further transfer.

Confidentiality Standards

Gambiva requires all third parties that handle personal data on its behalf to maintain confidentiality standards no less rigorous than those applied internally. Regular assessments are conducted to ensure ongoing compliance with these obligations.

Scope of Application

The terms of this disclaimer apply in circumstances where a user has formally accepted this Privacy Policy by:

• Completing the registration process and accepting the terms presented at sign-up;
• Ratifying the agreement through continued use of the platform following any policy updates;
• Joining the platform under any arrangement that incorporates this document by reference.

Effect of Acceptance

Acceptance of this Privacy Policy constitutes a binding agreement between the user and Gambiva. Certain standard legal norms may be modified or supplemented by this document to reflect the specific regulatory environment in which Gambiva operates, including requirements under UK GDPR, the Data Protection Act 2018, and UK Gambling Commission licensing conditions.

Policy Updates

Gambiva reserves the right to amend this Privacy Policy at any time. Users will be notified of material changes, and continued use of the platform following such notification constitutes acceptance of the revised terms. The most current version of this document supersedes all prior versions.

Full Acceptance Required

By registering an account or continuing to use the platform, users confirm that they have read, understood, and accepted the terms of this Privacy Policy in their entirety. Partial acceptance is not permitted.

Current Version Takes Precedence

This document represents the most current version of the Gambiva Privacy Policy. It supersedes and replaces all previous versions of this document. In the event of any inconsistency between this version and any prior version, the terms set out in this document shall prevail.

Notification of Changes

Gambiva reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or regulatory guidance. Users will be informed of significant changes via the platform or by direct communication. Continued use of the site following the publication of an updated policy constitutes acceptance of the revised terms.

Gambiva may share personal data with third parties in specific, defined circumstances. All such sharing is conducted in compliance with this Privacy Policy and applicable UK data protection law.

Circumstances for Data Sharing

Personal data may be disclosed to third parties in the following situations:

• To resolve disputes, including those involving payment processing or account activity;
• To fulfil contractual obligations to service providers, affiliates, or business partners;
• To comply with legal obligations, including requests from regulatory authorities or law enforcement agencies.

Identification of Third Parties

Where possible, third parties with whom data may be shared are identified on the Gambiva platform. In cases where a specific third party is not listed, Gambiva will disclose the purpose of the transfer and the categories of data shared upon request.

Consent Through Data Submission

By providing personal information to Gambiva, users consent to its transfer to authorised third parties as described in this section. This consent is limited strictly to the purposes outlined in this document.

Third-Party Obligations

All third parties that receive personal data from Gambiva are required to:

• Handle the data in accordance with UK GDPR and applicable data protection standards;
• Use the data solely for the purposes for which it was shared;
• Maintain appropriate technical and organisational security measures.

No Responsibility for External Sites

Gambiva does not control the content, data collection practices, or privacy policies of any external website. The operator accepts no liability for how personal data is collected, stored, or used by third-party platforms accessed through links on the Gambiva site.

Independent Privacy Policies

Each external website linked from the Gambiva platform operates under its own privacy policy, which may differ significantly from this document. Users are strongly advised to:

• Review the privacy policy of any external website before submitting personal information;
• Exercise caution when navigating away from the Gambiva platform;
• Contact the relevant third-party operator directly with any questions regarding their data practices.

User Responsibility

Once a user navigates to an external website, their activity on that site falls outside the scope of this Privacy Policy. Gambiva bears no responsibility for any data processing that occurs on third-party platforms, regardless of how the user arrived at those sites.